Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: hQWitqSY0MjF66WHPqxt5IAsGU1eN55D0DXuRpDZnYE=
Subject key identifier: 09:1B:AC:FC:69:8A:BF:FF:0A:20:4F:42:21:AF:A5:C2:60:64:DB:F0
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 019A733856B8E4157A0BDB7BC9E777012A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 0B86
Signing time: Tue 11 Nov 2025 14:01:03 +0000
Manifest this update: Tue 11 Nov 2025 14:01:03 +0000
Manifest next update: Wed 12 Nov 2025 14:01:03 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: bT5x8QQVEHnfLOaBd66zPX9BnDh28ACtxk/NVy12scQ=)
2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:56:b8:e4:15:7a:0b:db:7b:c9:e7:77:01:2a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Nov 11 14:01:03 2025 GMT
Not After : Nov 12 14:01:03 2025 GMT
Subject: CN=091bacfc698abfff0a204f4221afa5c26064dbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:f0:14:80:61:58:c8:d2:a9:fe:de:06:cd:
9a:dc:ef:4f:0d:4b:78:ba:72:a3:a4:fe:25:37:06:
af:14:e0:2f:84:b9:12:e7:97:ba:43:79:71:ae:4b:
9e:9e:52:08:ba:81:1b:41:eb:0c:e1:21:1b:99:03:
b5:a5:bc:aa:ca:38:53:70:13:e9:59:52:48:1f:c4:
e6:d8:33:b3:28:2f:a7:1e:43:f0:87:da:5a:cd:d8:
41:eb:06:2f:3e:fa:a7:d7:28:3d:2d:eb:13:15:c9:
69:51:90:09:79:0c:9e:99:e3:db:50:56:23:77:03:
c2:9d:91:31:62:9e:52:33:37:d7:4c:6b:41:39:7e:
81:0a:fa:c8:a2:b1:50:6c:3a:2c:41:fb:03:d6:fd:
90:90:04:b5:b0:7a:66:75:45:47:71:10:07:49:8f:
40:88:01:c9:4d:3e:79:32:f7:99:ea:da:7b:f1:d6:
b6:52:f9:0c:ef:da:c2:10:13:59:cb:1c:4b:36:6a:
c1:63:31:de:ab:02:23:8f:45:80:65:ee:d4:20:e2:
8b:7e:7f:1c:03:3f:7d:ff:56:0a:9b:e7:92:b8:60:
21:55:b2:4c:a2:9d:01:19:b8:db:84:af:60:27:d2:
78:6d:06:43:a0:2d:6f:77:a2:43:9c:37:8e:78:e0:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1B:AC:FC:69:8A:BF:FF:0A:20:4F:42:21:AF:A5:C2:60:64:DB:F0
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:eb:e1:f0:b0:49:d3:e2:48:bc:3a:ff:21:4f:ca:2d:c5:0d:
c7:d6:6f:f1:29:16:98:2c:0d:dc:7d:10:1a:12:f6:d7:51:95:
0e:16:ad:1d:09:c4:ca:87:45:80:09:89:80:96:46:11:87:83:
b1:d0:ac:73:86:c6:a2:14:c1:3e:aa:fd:99:ce:c5:af:db:09:
a9:45:82:3f:ad:d3:2b:30:ab:97:64:b8:e7:56:f3:66:06:d6:
6f:8f:27:b1:86:a4:06:ae:33:92:4c:50:bb:bb:d9:d7:c2:e9:
29:27:3c:d3:08:d2:54:4c:3a:1d:dc:d4:8d:4b:11:6d:39:8c:
75:0d:9c:92:44:97:1b:6a:3f:a6:95:53:d8:32:9c:f3:8d:4f:
a8:ff:7e:db:7e:b4:3d:99:2a:7c:d0:54:c4:46:17:07:27:cb:
dc:a1:ad:00:49:34:61:8f:8e:8d:ae:00:71:45:d3:17:9f:1c:
84:14:9e:ca:16:88:39:bf:29:2f:01:30:90:6b:c6:54:5c:dd:
c0:45:6a:d7:cc:e1:6f:17:32:de:9d:5a:cc:4e:b7:8b:ca:87:
a1:81:c7:6c:74:d4:9f:f8:0b:81:2b:1d:b0:76:b2:b6:59:e0:
98:fd:ac:27:31:14:a6:dc:b0:37:50:62:f7:1c:cf:7c:5b:e7:
91:87:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:41 2025 by rpki-client